The package has clear MIT licensing, substantial documentation, repository tests, and no install-time scripts. Its old dependency profile and absent security policy add maintenance uncertainty.
42%
Total Score
33
50
67
88
The latest release was about 5 years and 3 months ago, with no releases in the last 12 months; 43 releases were concentrated at the project's start. This is strong evidence of stalled maintenance.
The repository had zero commits and zero active maintainers during the last 3 months, consistent with no meaningful activity since July 2021. This is the strongest maintenance concern in the assessment.
Five runtime dependencies create some maintenance surface, but the profile is moderate and does not by itself indicate an unhealthy package. The absence of recent releases makes compatibility upkeep more concerning.
The repository is owned by an individual account rather than an organization, so there is no provided evidence of organizational backing. This leaves the inactive project with a thin visible support structure.
There were no new or closed issues or pull requests in the last month, and no pull requests were open. Combined with the stale repository, this supports the conclusion that maintenance is inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/cache Version ^1.0 | — | — |
evenement/evenement Version ^3.0 || ^2.0 || ^1.0 | — | — |
alchemy/binary-driver Version ^1.5 || ~2.0.0 || ^5.0 | — | — |
neutron/temporary-filesystem Version ^2.1.1 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.